$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.cer File: 3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.cer (raw, json) Hash identifier: rBeDam6sRJ/bG4pjDBkLi0jRSHHrjk98zSE5oMpIBhc= Subject key identifier: DE:87:2B:AD:26:2D:18:F0:A6:74:9E:02:72:D9:75:26:1D:94:9E:C3 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 19ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:28 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 157.20.68.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 16:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6637 (0x19ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DE872BAD262D18F0A6749E0272D975261D949EC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:90:cf:e5:2e:90:f7:a1:8f:b4:6f:5e:2d:6b: eb:65:7b:bd:e4:2d:f3:ee:cc:80:eb:9a:ef:2d:e5: 40:1f:2b:b0:32:ca:d7:4d:71:dc:03:f6:c3:43:25: f4:da:06:ad:eb:46:c4:78:94:0c:8a:c7:41:c2:f7: a1:8b:7e:26:4e:14:cb:80:8c:36:30:24:f3:dc:f2: 1e:3d:9b:66:e6:26:c6:2f:56:cf:0a:8d:4d:ed:1c: 6e:66:07:24:89:7f:6f:23:21:9d:a2:39:2a:bd:53: 43:25:db:0d:54:1a:ac:82:72:dc:1a:4a:49:e9:81: dd:4a:c3:4b:46:af:71:d3:54:23:c6:08:3e:1c:ff: dc:90:17:72:9c:46:99:3f:71:1e:87:28:c4:ea:00: 12:4d:75:ae:57:ea:e7:25:bc:6a:03:3b:f6:75:e5: be:21:c8:36:b0:a8:b0:49:95:26:9d:fc:fe:96:d1: e6:b2:14:d6:70:e6:2a:28:e5:2d:48:e4:65:87:23: 7e:6f:60:53:70:68:23:62:16:11:89:47:a5:59:63: a7:68:1e:4d:3b:78:af:41:a0:f7:98:6c:94:5d:2c: 09:0b:ae:09:57:fd:41:e9:11:ec:c1:10:58:06:3f: 57:5d:02:64:dc:d9:dd:d7:d0:d8:c7:d9:b5:82:0e: 15:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:87:2B:AD:26:2D:18:F0:A6:74:9E:02:72:D9:75:26:1D:94:9E:C3 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.68.0/23 Signature Algorithm: sha256WithRSAEncryption 04:88:d3:6e:5d:59:17:14:f3:ce:07:96:16:6e:cd:a8:cb:8a: 2e:00:ee:92:91:0a:2e:89:c4:8b:2f:4e:77:94:ec:58:2f:fe: a9:92:6f:f2:92:e6:15:df:e6:3f:df:2c:4a:7d:f8:b2:79:71: 69:63:14:8c:50:97:1e:fc:33:49:62:fc:9b:5c:d7:60:13:76: cb:e9:77:40:39:fb:31:c5:97:b3:2c:84:8e:ab:30:5f:2b:72: af:80:29:7b:ea:d4:a8:3e:3e:bc:07:95:06:9b:ef:d6:5f:c2: 5a:f6:f9:dc:bb:48:31:7e:52:2a:07:98:4f:de:dc:7d:6f:8e: 58:bd:5d:b9:dc:e3:0d:aa:ab:3d:ed:04:e6:63:f0:01:e3:56: 7b:66:4d:64:2b:f3:8b:59:1d:e5:21:00:57:16:e9:8f:8d:44: 6a:4e:9d:ef:3b:5d:6c:95:f5:a5:43:49:d0:39:c1:d3:38:c8: 2e:53:9a:d1:51:1f:ed:73:5e:30:e6:3a:14:e2:d6:1d:f1:f9: c2:0c:8d:6f:b2:95:4d:8b:35:24:4d:da:31:a3:fa:6d:f5:5a: 38:a8:e0:7c:5b:c8:b1:f8:94:d8:d8:52:be:3c:92:fd:74:ef: 04:9b:13:fd:0b:c4:f7:10:d6:16:8c:7b:0f:b9:0c:ea:96:70: 23:73:b1:46 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICGe0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDIxMDE0MjkyOFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoREU4NzJCQUQyNjJEMThGMEE2NzQ5RTAyNzJEOTc1MjYxRDk0OUVD MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALuQz+UukPehj7RvXi1r 62V7veQt8+7MgOua7y3lQB8rsDLK101x3AP2w0Ml9NoGretGxHiUDIrHQcL3oYt+ Jk4Uy4CMNjAk89zyHj2bZuYmxi9WzwqNTe0cbmYHJIl/byMhnaI5Kr1TQyXbDVQa rIJy3BpKSemB3UrDS0avcdNUI8YIPhz/3JAXcpxGmT9xHocoxOoAEk11rlfq5yW8 agM79nXlviHINrCosEmVJp38/pbR5rIU1nDmKijlLUjkZYcjfm9gU3BoI2IWEYlH pVljp2geTTt4r0Gg95hslF0sCQuuCVf9QekR7MEQWAY/V10CZNzZ3dfQ2MfZtYIO FbkCAwEAAaOCAkwwggJIMB0GA1UdDgQWBBTehyutJi0Y8KZ0ngJy2XUmHZSewzAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRlVZVS8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9G VVlVLzNvY3JyU1l0R1BDbWRKNENjdGwxSmgyVW5zTS5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdFEQwDQYJKoZIhvcNAQELBQADggEBAASI025d WRcU884HlhZuzajLii4A7pKRCi6JxIsvTneU7Fgv/qmSb/KS5hXf5j/fLEp9+LJ5 cWljFIxQlx78M0li/Jtc12ATdsvpd0A5+zHFl7MshI6rMF8rcq+AKXvq1Kg+PrwH lQab79Zfwlr2+dy7SDF+UioHmE/e3H1vjli9Xbnc4w2qqz3tBOZj8AHjVntmTWQr 84tZHeUhAFcW6Y+NRGpOne87XWyV9aVDSdA5wdM4yC5TmtFRH+1zXjDmOhTi1h3x +cIMjW+ylU2LNSRN2jGj+m31Wjio4HxbyLH4lNjYUr48kv107wSbE/0LxPcQ1haM ew+5DOqWcCNzsUY= -----END CERTIFICATE-----Generated at Sat Apr 5 16:32:14 2025 by rpki-client